CWE-229
AllowedImproper Handling of Values
Abstraction: Base · Status: Incomplete
The product does not properly handle when the expected number of values for parameters, fields, or arguments is not provided in input, or if those values are undefined.
32 vulnerabilities reference this CWE, most recent first.
GHSA-MWV3-X6R9-R9C2
Vulnerability from github – Published: 2026-01-30 18:31 – Updated: 2026-01-30 18:31After receiving a
malformed 802.15.4 MAC Data Request
the Zigbee Coordinator sends a ‘network leave’ request to Zigbee router resulting in the Zigbee Router getting stuck in a non-rejoinable state. If a suitable parent is not available, the end devices will be unable to rejoin. A manual recommissioning is required to recover the Zigbee Router.
{
"affected": [],
"aliases": [
"CVE-2025-7964"
],
"database_specific": {
"cwe_ids": [
"CWE-229"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2026-01-30T16:16:11Z",
"severity": "CRITICAL"
},
"details": "After receiving a \n\nmalformed 802.15.4 MAC Data Request\n\n the Zigbee Coordinator sends a \u2018network leave\u2019 request to Zigbee router resulting in the Zigbee Router getting stuck in a non-rejoinable state. If a suitable parent is not available, the end devices will be unable to rejoin.\u00a0A manual recommissioning is required to recover the Zigbee Router.",
"id": "GHSA-mwv3-x6r9-r9c2",
"modified": "2026-01-30T18:31:15Z",
"published": "2026-01-30T18:31:15Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-7964"
},
{
"type": "WEB",
"url": "https://community.silabs.com/068Vm00000dspiL"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"type": "CVSS_V4"
}
]
}
GHSA-W2GJ-CMFM-C4J4
Vulnerability from github – Published: 2026-03-27 09:31 – Updated: 2026-06-30 03:36ManageSieve AUTHENTICATE command crashes when using literal as SASL initial response. This can be used to crash ManageSieve service repeatedly, making it unavailable for other users. Control access to ManageSieve port, or disable the service if it's not needed. Alternatively upgrade to a fixed version. No publicly available exploits are known.
{
"affected": [],
"aliases": [
"CVE-2025-59032"
],
"database_specific": {
"cwe_ids": [
"CWE-20",
"CWE-229"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2026-03-27T09:16:18Z",
"severity": "HIGH"
},
"details": "ManageSieve AUTHENTICATE command crashes when using literal as SASL initial response. This can be used to crash ManageSieve service repeatedly, making it unavailable for other users. Control access to ManageSieve port, or disable the service if it\u0027s not needed. Alternatively upgrade to a fixed version. No publicly available exploits are known.",
"id": "GHSA-w2gj-cmfm-c4j4",
"modified": "2026-06-30T03:36:02Z",
"published": "2026-03-27T09:31:18Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-59032"
},
{
"type": "WEB",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59032.json"
},
{
"type": "WEB",
"url": "https://documentation.open-xchange.com/dovecot/security/advisories/csaf/2026/oxdc-adv-2026-0001.json"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452172"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2025-59032"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:26564"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:19455"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:19453"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:19364"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:19149"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:18053"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:17630"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:17628"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:17626"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:17625"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:17602"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:13857"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:13830"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:13498"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
}
]
}
No mitigation information available for this CWE.
No CAPEC attack patterns related to this CWE.